TODO

[truxnell]

Repositroy

• [ ] #275
• [x] lock down main branch protection
• [ ] #276
• [x] github build for pxeboot images?
• [x] enable garnix #28
• [ ] #277
• [ ] #278
• [x] docs incl. nix options

NixOS system

• [x] modularise #21
• [x] substituters 32e6a709282d9e5099499289cd5e8fbef25baa7b
• [x] local binary cache on NAS? any benefit when running garnix? [probably yes, still caches locally to minimise dl]
• [x] #31
• [ ] #279
• [ ] #77
• [x] #33
• [ ] #280
• [ ] #281
• [ ] add GNOME triple buffering
• [ ] #39
• [x] #84
• [x] mail system - to maddy smtp forward to me for notif
• [x] tests for system critical things? say ensure dns works on servers etc?
• [x] Automatic updates.
• [x] Automatic gc
• [ ] #282
• [ ] #41
• [x] periodic btrfs scrub.
• [ ] #283
• [ ] #284
• [ ] #287
• [ ] #286
• [ ] #285
• [x] wifi/nmcli
• [x] #51
• [x] WSL
• [x] #54
• [ ] #288
• [ ] #66
• [ ] #67
• [x] #91
• [ ] restic NAS backup to b2
• [ ]

Home-manager

• [ ] setup git (#56 partial, needs signing keys/etc)
• [ ] git pull --autostash --rebase=true
• [x] login deets/email/name #56
• [ ] ssh key
• [x] program list #56
• [x] factor into modules where appropriate #56
• [ ] workstations - export per-device age key derived from ssh for task encryption
• [x] Gnome dconf2nix for settings #56
• [x] Gnome extensions #56
• [ ] cache speed - socks5?
• [x] #90
• [ ] wireguard configs
• [ ] yubikey for ssh keys?

home-apps

• [ ] vscode (with settings.json.plugins
• [ ] prusaslicer #56
• [ ] discord #56
• [x] #30
• [ ] steam (investigage extras/port forwards
• [ ] spotify #56
• [ ] sycthing
• [ ] #48
• [ ] kde-connect #56

Servers

• [ ] auto update servers centrally using deploy-rs from main?
  • this would allow rollbacks but would need a robust notification on failures?
  • how and if to handle auto reboots?
• [ ] PXE boot server on pi?
• [x] prometheus exports on all servers
• [x] restic-backups
• [ ] #70

Investigate

• [x] use cockpit for servers - will this run on pi minimally?
• [x] #103
• [ ] #106

new devices

• [ ] raspi with spotifyd and plexamp headless for DAC
• [ ] GPS time server raspi

Docs

• [x] #104
• [x] permeate options(wtf permeate? Permutarmte)

Apps

• [x] paperless
• [x] radicale
• [ ] red-dicsord-bot
• [x] thelounge
• [ ] webtrees
• [ ] seafile
• [x] Autobrr
• [x] calibre
• [x] overseer
• [x] recyclarr
• [x] ecowitt2mqtt
• [ ] dizquetv
• [x] prom
• [x] grafana
• [ ] promtail
• [ ] loki
• [x] changedetection
• [x] hs110exporter
• [ ] umami
• [ ] authelia
• [ ] cloudflared
• [ ] mailbackup
• [x] afterlogic-webmail
• [ ] firefly-iii
• [ ] language-tools
• [x] maloja
• [x] multi-scrobbler
• [x] miniflux

[truxnell]

Email ideas

TODO Email settings
programs.msmtp = {
enable = true;
accounts.default = {
host = "maddy.home.tld";
from = "${config.networking.hostName}@trux.dev";
};
defaults = {
aliases = "/etc/aliases";
};
};

[truxnell]

WSL https://github.com/nix-community/NixOS-WSL